$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer (raw, json) Hash identifier: fURisuR9D3p8bbk4EPABCGZuvWRNINMcm3TBT3nPKPs= Subject key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D74711541171FAE6556333CAF4EECA8D2514B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft caRepository: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Dec 2024 22:53:30 +0000 Certificate not after: Thu 04 Dec 2025 22:58:30 +0000 Subordinate resources: IP: 103.63.26.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:74:71:15:41:17:1f:ae:65:56:33:3c:af:4e:ec:a8:d2:51:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 5 22:53:30 2024 GMT Not After : Dec 4 22:58:30 2025 GMT Subject: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:ac:df:5a:5f:fa:b2:cf:82:9d:36:b1:03: ba:3e:6c:4d:ac:6d:43:e2:76:96:95:49:ae:7a:b0: b0:fd:4e:c1:90:1b:67:ff:f0:e8:02:e0:64:a4:58: 18:fd:0e:c5:2a:34:66:35:6e:0d:c2:11:27:83:6b: 6c:a5:73:f6:62:fe:95:76:d5:23:66:ac:e9:47:b9: 1a:e8:57:a5:f5:be:93:4a:ef:b3:74:c5:bc:89:7f: 54:f1:22:a5:75:6e:bf:e7:04:be:b2:6e:3b:a7:21: c8:64:ef:85:7b:29:25:d0:d8:e2:d5:f1:9a:b1:34: 08:bf:35:0c:7e:94:85:0d:e7:7b:77:87:c7:bc:b0: e0:49:a1:15:59:d9:85:2f:f1:84:9b:54:2c:a4:dd: d6:79:00:78:44:49:60:28:73:72:9e:75:00:e1:0f: 26:c7:2a:18:cf:b5:34:f5:03:85:97:26:5c:c5:70: be:b0:ae:a9:d9:ee:71:4a:f7:f0:60:ca:69:e7:61: 0d:66:27:d0:c9:ef:34:3a:ef:d8:b8:27:a7:a8:1a: ba:92:17:1f:82:cf:6f:75:fd:06:1f:27:71:98:d2: e2:d7:9e:b9:fd:f1:df:0d:b4:d5:cc:6a:ac:e4:97: c6:38:43:95:f4:c4:12:9a:7b:6b:e6:0d:98:60:df: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.63.26.0/24 Signature Algorithm: sha256WithRSAEncryption 10:b3:cf:0c:43:e8:8c:1d:b6:e5:68:c7:2f:b4:ab:35:fe:c2: 90:74:db:71:1c:9d:b7:28:78:88:09:58:01:0c:ed:05:8a:4a: 4e:fb:d7:f0:89:3e:7d:48:5c:d7:15:09:50:9a:73:9f:13:61: df:e2:f8:58:01:0b:a1:d9:dc:2d:88:5d:d4:3a:a9:00:77:df: 5d:d9:4b:4e:ca:56:5d:ca:d5:73:12:a8:84:84:89:9f:65:de: 6c:74:0f:28:77:c2:e4:6b:8c:fe:67:55:4b:62:b7:b7:ca:5c: 27:41:66:2c:2d:ae:e6:9d:8e:cf:1d:e8:62:c7:d2:a5:b6:29: 3a:95:0e:33:c3:21:cd:2a:91:5c:12:5a:a7:18:85:05:81:2f: eb:d6:d0:b0:14:bf:d0:cc:7a:22:59:05:9b:74:a0:e7:ef:e0: 20:78:fd:43:5c:61:82:7b:f9:14:40:fa:39:0c:cb:26:fe:6a: 32:5c:e7:6b:7e:63:c5:75:17:9b:30:78:73:2c:bf:72:c7:2d: f8:d9:0e:57:1c:cb:09:c8:4f:7a:33:bb:6e:73:e4:6e:64:e0: 7a:b0:f6:34:96:6b:7d:1c:bb:54:2d:e3:d0:ca:0f:1a:8b:75: c2:15:8d:19:84:a7:b1:c6:d0:97:ad:a6:e7:83:db:e5:5a:52: d0:9f:c4:e2 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITDXRxFUEXH65lVjM8r07sqNJRSzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjQxMjA1MjI1MzMwWhcN MjUxMjA0MjI1ODMwWjAzMTEwLwYDVQQDEyhBN0Q4M0VFODcwM0JCRDU5Q0RDQUE1 NjIyQURCMzVDM0Y5NzIyNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKas31pf+rLPgp02sQO6PmxNrG1D4naWlUmuerCw/U7BkBtn//DoAuBkpFgY /Q7FKjRmNW4NwhEng2tspXP2Yv6VdtUjZqzpR7ka6Fel9b6TSu+zdMW8iX9U8SKl dW6/5wS+sm47pyHIZO+Feykl0Nji1fGasTQIvzUMfpSFDed7d4fHvLDgSaEVWdmF L/GEm1QspN3WeQB4RElgKHNynnUA4Q8mxyoYz7U09QOFlyZcxXC+sK6p2e5xSvfw YMpp52ENZifQye80Ou/YuCenqBq6khcfgs9vdf0GHydxmNLi1565/fHfDbTVzGqs 5JfGOEOV9MQSmntr5g2YYN+bawIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUp9g+6HA7vVnNyqViKts1w/lyJygwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv Lzg5YTZjZWFmLWQ2OGMtNGRjYi04MjY3LWZkMWE1M2Q5OTk4OC8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYt ZDY4Yy00ZGNiLTgyNjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNE Q0FBNTYyMkFEQjM1QzNGOTcyMjcyOC5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGc/GjANBgkqhkiG9w0BAQsFAAOCAQEAELPPDEPojB225WjHL7SrNf7CkHTbcRyd tyh4iAlYAQztBYpKTvvX8Ik+fUhc1xUJUJpznxNh3+L4WAELodncLYhd1DqpAHff XdlLTspWXcrVcxKohISJn2XebHQPKHfC5GuM/mdVS2K3t8pcJ0FmLC2u5p2Ozx3o YsfSpbYpOpUOM8MhzSqRXBJapxiFBYEv69bQsBS/0Mx6IlkFm3Sg5+/gIHj9Q1xh gnv5FED6OQzLJv5qMlzna35jxXUXmzB4cyy/csct+NkOVxzLCchPejO7bnPkbmTg erD2NJZrfRy7VC3j0MoPGot1whWNGYSnscbQl62m54Pb5VpS0J/E4g== -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:19 2025 by rpki-client